[MSAPI-SECURITYCOMPLIANCECENTER] Alert Entity Generated for Email sending limit exceeded

alert any $HOME_NET any -> $EXTERNAL_NET any (msg: "[MSAPI-SECURITYCOMPLIANCECENTER] Alert Entity Generated for Email sending limit exceeded"; program:SecurityComplianceCenter; json_content: ".Operation", "AlertEntityGenerated"; json_content:".Name","Email sending limit exceeded"; json_map: "src_ip", ".ClientIP"; json_map: "dest_ip", ".ClientIP"; json_map: "username", ".AlertId"; json_map: "program",".Workload"; flexbits: set,AlertEntityGenerated,10; threshold:type suppress, track by_username, count 1, seconds 86400; classtype: suspicious-traffic; sid:5014183; rev:1;)